Who would you recommend as a zero trust vendor for small businesses and non-profits that use mostly BYOD and cloud services?

End-User DevicesData Protection & Encryption
1.2k viewscircle icon5 Upvotescircle icon5 Comments
Sort by:
Director of Information Security in Energy and Utilities4 years ago

You can take a look at Banyan and Perimeter 81 and Cyolo. All of them are fairly smallish startups that serve this type of category/request. Zscaler has a great product but the pricing might be a tad on the higher side of things vs. some of those other startups. Though really as first step you'd want to make sure that you have identity management in place (something like Okta) thats a great first step to have before rolling into zero trust stuff.

Lightbulb on2 circle icon1 Reply
no title4 years ago

Thank you, I'll check out Banyan and Perimeter 81. I can't seem to get Zscaler to respond to me so the shopping continues.

Lightbulb on1
VP, Chief Security & Compliance Officer in Software4 years ago

Thanks for the question.  Before looking at tools, the architecture behind a zero trust model requires quite a bit of consideration especially when we consider workloads that are inscope of the IAM conversation.  Firms to consider are ISSquared and Symmetry-Systems.

Lightbulb on3 circle icon1 Reply
no title4 years ago

Thank you. I'm shopping for solutions for a small non-profit that is 100% remote, BYOD and cloud-first.  I agree that there is a lot to consider but it's much easier to roll out when the organization is small so I'm trying to get them going ASAP before they grow.

Lightbulb on2
Sr. Director, IT Operations in Software4 years ago

I don't know how well they scale down from a medium-sized deployment, but I'd recommend talking with Zscaler at least from a technical standpoint.

Lightbulb on3

Content you might like

The traditional model of device procurement and management is showing its age. We're exploring how Device-as-a-Service (DaaS) and Windows Autopilot can simplify global device delivery—without owning inventory and relying on build-to-order machines. If there was globally available, enterprise-grade hardware, consistent and reliably available... are you interested to drop "build-to-order" and enjoy "smart buy" options enabled with zero-touch provisioning ?

Yes – get me out of the logistics and stock management57%

Maybe – depends38%

No – we need unique custom specs4%

View Results

As cyber recovery becomes more to the forefront for Disaster Recovery professionals, preparation for ransomware recovery is now starting to mature.  On-premises, and cloud-based solutions, and often with on-premises solutions comes the implementation of Secure Isolated Recovery Environments (SIRE). As your organization matures their cyber recovery solutions, is your or will your organization consider and or implement a on-premise, cloud-based, or hybrid secure isolated recovery environment? 

What is a Secure Isolated Recovery Environment (SIRE)?18%

Focus on an On-Premise SIRE.40%

Focus on a Cloud-based SIRE.43%

Focus on a hybrid SIRE.23%

Know about Secure Isolated Recovery Environments but no current plans to implement.4%

View Results

How is your organization mitigating risks from smart wearables or covert recording devices during sensitive conversations? Please share any relevant policies, technical solutions, or experiences managing this challenge.

We’re currently exploring options to implement an iPXE-based WinPE deployment solution in Microsoft Azure. Our goal is to streamline OS provisioning for virtual machines using cloud-hosted boot scripts and WinPE images, ideally over HTTP/S for performance and flexibility. Key requirements: Must support iPXE booting in Azure (via ISO, custom VM image, or chainloading). Ability to host and serve WinPE images securely (e.g., via Azure Blob Storage or web server). Cyber Essentials Plus compliance is essential, as we operate in a regulated environment. Preferably a UK-based provider with experience in secure cloud deployments and endpoint provisioning. We’ve looked into solutions like 2Pint Software’s iPXE Anywhere, but we’re open to other vendors or managed service providers who can assist with setup, integration, and ongoing support. Has anyone implemented a similar solution or worked with a provider who meets this criteria? Any recommendations or lessons learned would be greatly appreciated.

What's a quick win for optimizing spend? What's been your focus or "lowest hanging fruit"?

Read More Comments